Description

In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.

Remediation

References

CVE-2019-15043

Related Vulnerabilities

Resin Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2969)

Oracle Application Server CVE-2007-5526 Vulnerability (CVE-2007-5526)

e107 Other Vulnerability (CVE-2004-2042)

Squid Improper Input Validation Vulnerability (CVE-2021-31808)

OpenSSL Other Vulnerability (CVE-2015-0207)

Severity

High

Classification

CVE-2019-15043 CWE-306 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities